{"ip":"93.24.118.14","total_events":33692,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"33,692 events across 1 port(s)","confidence":"high","network_type":"residential ISP","why":["33,692 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range.","Held a session open for 18222s, against a median of well under a second."],"engagement":{"level":"payload","label":"Sustained payload, held open","detail":"24,819,232,874 bytes sent, longest session 18222s","bytes_sent":24819232874,"session_seconds":18222,"persistent":true}},"first_seen":"2026-08-16T11:29:23","last_seen":"2026-08-16T16:33:05","events_24h":0,"events_7d":33692,"geo":{"country_code":"FR","country_name":"France","region":"Pays de la Loire","city":"Nantes","lat":47.2145,"lon":-1.5512,"asn":15557,"org":"Societe Francaise Du Radiotelephone - SFR SA"},"source_domain":"14.118.24.93.rev.sfr.net","known_scanners":[],"scanner_tag":{"key":"peeringdb:as15557","label":"SFR Group","category":"isp","url":"https://www.peeringdb.com/asn/15557"},"cve_matches":[],"malware":[],"top_ports":[{"port":53,"proto":"tcp","label":"DNS","count":33692}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-16","count":33692}],"recent_events":[{"timestamp":"2026-08-16T16:33:05","port":53,"proto":"tcp","app_proto":"","app_protocol":"dns","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MhR��{�YEK��j�N@'P���^���NL7���","payload_hex":"4d685285b47b8359454be2fd6ae04e402750a799cf5eaeb3bb4e4c37adedb4","method":"","user_agent":"","ja3":"","session":"b42ff421-893b-4f05-87f9-1d3c50f95902","seq":33586,"duration_ms":18222054,"bytes_in":1424126,"bytes_out":402997,"enriched":{"digest":"56f29e08308698f6","strings":["N@'P"]}},{"timestamp":"2026-08-16T16:33:05","port":53,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0001\u0005�\u0015\u0005\n\u0018�+\u001d\u0012\u0017\u0012\u001f��\u0002M�\u0003�k)���\fp\u0017\u0005��","payload_hex":"0105c515050a18be2b1d1217121ff8b3024dd103b16b29c0a0860c701705d8cb","method":"","user_agent":"","ja3":"","session":"b42ff421-893b-4f05-87f9-1d3c50f95902","seq":33585,"duration_ms":18221723,"bytes_in":1424095,"bytes_out":402985},{"timestamp":"2026-08-16T16:33:05","port":53,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�����[=���","payload_hex":"efbdc2f1de5b3de4e994","method":"","user_agent":"","ja3":"","session":"b42ff421-893b-4f05-87f9-1d3c50f95902","seq":33584,"duration_ms":18221550,"bytes_in":1424063,"bytes_out":402973},{"timestamp":"2026-08-16T16:33:05","port":53,"proto":"tcp","app_proto":"","app_protocol":"dns","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":".\u000bt\n�zn��( \u0007yX�J$�f�۷���)˭�X���<̌�s�}�ص\f�","payload_hex":"2e0b740a8c7a6ebbe32820077958be4a249c66c7dbb7c9ebf429cbadb558a7f8a33ccc8c9273ee7d8fd8b50c95","method":"","user_agent":"","ja3":"","session":"b42ff421-893b-4f05-87f9-1d3c50f95902","seq":33583,"duration_ms":18221371,"bytes_in":1424053,"bytes_out":402961},{"timestamp":"2026-08-16T16:33:04","port":53,"proto":"tcp","app_proto":"","app_protocol":"dns","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�k�\u001f�EሰL��m�X��TFK\u001a��\u0006���\u0004}��^�*\u0006y!�=��l?u��$","payload_hex":"d86be11f9145e188b04cfacc6db858c5eb54464b1a92a006eff9d5047db2835e872a067921e43da9f96c3f75f37ffd24","method":"","user_agent":"","ja3":"","session":"b42ff421-893b-4f05-87f9-1d3c50f95902","seq":33582,"duration_ms":18220738,"bytes_in":1424008,"bytes_out":402949},{"timestamp":"2026-08-16T16:33:04","port":53,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��荼3cz�!:6\u0000`","payload_hex":"e49ce88dbc33637af1213a360060","method":"","user_agent":"","ja3":"","session":"b42ff421-893b-4f05-87f9-1d3c50f95902","seq":33581,"duration_ms":18220365,"bytes_in":1423960,"bytes_out":402937,"enriched":{"digest":"6f1c43412c4d03d5","strings":["!:6`"]}},{"timestamp":"2026-08-16T16:33:04","port":53,"proto":"tcp","app_proto":"","app_protocol":"dns","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�.�:��|qŌqx��\u0003�","payload_hex":"8c2ee43abf907c71c58c71789f9d03db","method":"","user_agent":"","ja3":"","session":"b42ff421-893b-4f05-87f9-1d3c50f95902","seq":33580,"duration_ms":18220185,"bytes_in":1423946,"bytes_out":402925},{"timestamp":"2026-08-16T16:33:03","port":53,"proto":"tcp","app_proto":"","app_protocol":"dns","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�����+����\u0007�\u0007X��k-�5ᩜ\u0017)\u0001�\u0004���>C���\u0004�[","payload_hex":"baf4baedb52b888ab2a807de0758e8dc6b2d8135e1a99c172901d404b0bb903e439286ff04d65b","method":"","user_agent":"","ja3":"","session":"b42ff421-893b-4f05-87f9-1d3c50f95902","seq":33579,"duration_ms":18219981,"bytes_in":1423930,"bytes_out":402913},{"timestamp":"2026-08-16T16:33:03","port":53,"proto":"tcp","app_proto":"","app_protocol":"dns","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�2gn�4�8�\u000bw�]_��*\u0001��\u000f\u0018t��� ��S3�D\u001c���","payload_hex":"d232676ed034e9389e0b77e35d5fa9f92a01badd0f1874fcb2c020e5d75333a9447f1cfe95b3","method":"","user_agent":"","ja3":"","session":"b42ff421-893b-4f05-87f9-1d3c50f95902","seq":33578,"duration_ms":18219789,"bytes_in":1423891,"bytes_out":402901},{"timestamp":"2026-08-16T16:33:03","port":53,"proto":"tcp","app_proto":"","app_protocol":"dns","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"΄�)���e\u0006D9�>�p\r��������\r2\n�cS �D(�","payload_hex":"ce84f929fc87a765064439cc3ef6700de4f6c9f7edaef2c60d320ae8635320b14428fd","method":"","user_agent":"","ja3":"","session":"b42ff421-893b-4f05-87f9-1d3c50f95902","seq":33577,"duration_ms":18219543,"bytes_in":1423853,"bytes_out":402889}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-21T00:32:40.691789+00:00"}